How to configure Safepipe for a VPN connection with Windows 2000's native client

Introduction

It is possible to use Windows 2000's native client to establish a VPN connection (a secure tunnel) between a remote Windows 2000 PC and Safepipe release 2.3 or newer. This guide describes how you configure Safepipe for the connection.

Note: You must perform the configuration on Safepipe before configuring the remote Windows 2000 PC for the connection.

Prerequisites

• Safepipe must be installed.

• The public and private IP addresses for Safepipe must be configured.

Procedure

1. On Safepipe's management interface, click 'Tunnels' > 'Windows 2000 Tunnel'.

        

2. On the 'Options' tab, enter the network address and corresponding subnet mask of at least one and no more than five subnets on your LAN, to which the users of Windows 2000's native client may have access.
   
   
   

3. Click on the 'Generate' button to create a CA (Certificate Authority) certificate on Safepipe that can verify the users of Windows 2000's native client. This will take several minutes.
   
   
   
   Afterwards, the 'CA date' field will display the present date.
   
   

4. On the 'Users' tab, click the 'Add Tunnel' button.
   
   

5. Click the <Not Configured> link in the 'Name' column of the new tunnel.
   
   

6. Enter a name for the user of Windows 2000's native client. Enter a certificate password to unlock the certificate file on the user's PC.
   
   If you leave the 'Certificate Password' field empty, a random password will be generated by Safepipe.
   
   

7. Click the 'Apply Changes' button.
   
   

8. Safepipe will now generate a certificate file for the user. Once the certificate file is generated, the 'Certificate File' field changes from displaying <Not Configured> to displaying Download. Click on the 'Download' link to save the certificate file for the remote user onto your hard disk or a diskette.
   
   

9. Click on the 'Windows 2000 Tunnel' icon to return to the 'Users' tab, where the new Windows 2000 tunnel should now be displayed with the name you entered and the status <Not Connected>.
   
        
   
   

10. Enable the tunnel by clicking the 'Enable' button.
    
    

11. To proceed with the configuration of the remote Windows 2000 PC, follow the guide How to configure Windows 2000 native client for a connection with Safepipe.